Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/bw2SzLKvl4UwZLMb22WOdG91xDo.roa
File: bw2SzLKvl4UwZLMb22WOdG91xDo.roa (raw, json)
Hash identifier: KlosgMuGJ0G598+wXjj3b8Y7iM82j3gHRwHEdjG8Pf0=
Subject key identifier: 6F:0D:92:CC:B2:AF:97:85:30:64:B3:1B:DB:65:8E:74:6F:75:C4:3A
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0780A78C
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/bw2SzLKvl4UwZLMb22WOdG91xDo.roa
Signing time: Fri 18 Feb 2022 15:19:19 +0000
ROA not before: Fri 18 Feb 2022 15:19:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60458
IP address blocks: 77.90.189.0/24 maxlen: 24
77.90.188.0/24 maxlen: 24
77.90.156.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125872012 (0x780a78c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Feb 18 15:19:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6f0d92ccb2af97853064b31bdb658e746f75c43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:a0:e0:44:26:72:c4:ac:eb:3e:b5:49:19:
8f:99:5a:a0:33:48:85:55:6b:94:2f:2c:43:f7:b5:
14:70:2f:3b:6d:20:9a:dd:0b:8e:ca:48:a9:69:53:
4c:21:53:be:f9:c9:29:c3:e8:b6:40:71:64:46:88:
39:05:61:bf:a0:90:94:f4:12:c9:16:b4:b5:29:e6:
30:c8:8a:ed:b8:1f:fa:00:42:f5:9e:bb:b4:e1:4c:
f5:03:ba:66:ce:6b:97:89:5d:67:e0:a7:3c:55:d8:
3f:23:1f:52:ad:f5:07:d5:ff:bc:59:1e:f5:eb:2c:
ce:14:2b:ba:1d:37:e6:73:8e:02:5f:13:4e:b6:33:
31:f6:5f:3e:68:6f:e1:5e:8b:92:5e:85:ea:4a:42:
ea:13:e0:e1:aa:54:9f:ff:3b:9d:5a:7a:86:57:32:
00:9c:bd:b9:c7:45:c5:70:1d:7b:1a:dd:17:de:fd:
01:99:76:f3:68:5f:7e:5f:be:e3:a8:26:14:5b:b5:
73:13:9e:3a:73:bc:f9:6c:6a:48:d2:1e:62:e9:ec:
b8:ed:a3:b3:1a:35:3a:f7:7b:fc:a9:ef:64:27:41:
8e:e1:e7:1c:0e:c4:34:5b:01:9f:71:5a:8a:05:54:
73:4e:4d:42:94:19:05:85:f1:e1:a7:c2:b3:43:d4:
b0:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0D:92:CC:B2:AF:97:85:30:64:B3:1B:DB:65:8E:74:6F:75:C4:3A
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/bw2SzLKvl4UwZLMb22WOdG91xDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.156.0/24
77.90.188.0/23
Signature Algorithm: sha256WithRSAEncryption
09:6c:3e:ef:22:20:e5:cd:3a:a6:d7:45:5f:3d:c2:8c:b6:16:
55:16:ab:3c:73:f2:a0:e6:e0:dc:6e:e8:73:d2:95:0f:d8:87:
8e:33:a5:7f:fd:e6:9c:35:03:d6:0e:85:39:15:85:6e:82:fd:
a7:b3:b3:75:b6:87:45:c4:f4:e7:ff:3f:95:d9:36:82:d6:47:
3d:fa:20:51:26:9a:a4:9a:53:ff:09:da:f2:02:34:84:39:6c:
03:04:b9:11:05:19:d5:0b:0a:83:9e:ae:82:4d:d7:43:ed:7b:
4f:3f:ad:7d:f4:55:95:19:5f:9a:fa:fc:a4:f6:39:e8:84:b6:
82:a1:94:ac:31:6d:ab:f4:ed:d2:91:19:9a:b3:28:c8:0a:9b:
23:1a:9f:52:79:28:3f:45:fc:58:ab:11:e1:74:d6:13:c4:d3:
f5:64:1e:6f:fd:c1:19:81:ac:19:2c:56:79:97:dd:88:a4:f8:
c9:36:fc:2f:e7:0a:77:2f:1d:88:49:6b:5b:9c:1f:73:88:b8:
f0:17:1c:31:41:4b:cf:7e:10:29:0b:73:34:8b:78:48:77:22:
92:91:54:21:a6:e1:05:f1:6b:17:91:83:08:77:ec:85:6a:92:
78:fe:9f:cb:33:ef:d8:8f:39:cc:c7:c5:61:12:7e:21:20:a3:
c2:5c:77:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:23 2023 by rpki-client on console-fra.rpki-client.org